Exam (elaborations)
DIGITAL FORENSIC CERTIFICATION EXAM (A STUDY SET) | 323 QUESTIONS | WITH COMPLETE SOLUTIONS!!
- Course
- Institution
DIGITAL FORENSIC CERTIFICATION EXAM (A STUDY SET) | 323 QUESTIONS | WITH COMPLETE SOLUTIONS!!
[Show more]
Content preview
DIGITAL FORENSICCERTIFICATION EXAM
(A STUDY SET) | 323
QUESTIONS | WITH
COMPLETE
SOLUTIONS!!
Evatee 10/21/24 DIGITAL FORENSIC
,DIGITAL FORENSIC CERTIFICATION EXAM (A
STUDY SET) | 323 QUESTIONS | WITH
COMPLETE SOLUTIONS!!
Jack, a disgruntled employee of an organization, gained access to the
organization's database server. He manipulated client records stored on the
database server to damage the reputation of the organization and to make the
organization face legal consequences for losing integrity.
Identify the type of attack performed by Jack in the above scenario. Answer -
Internal attack
Explanation:
Brute-force attack: A brute-force attack is performed by attempting all possible
combinations of usernames and passwords to determine valid credentials.
Internal attack: These attacks originate from people within the organization
such as disgruntled employees, current or terminated employees, business
associates, contractors, and/or undertrained staff.
External attack: External attacks refer to attacks that originate from outside
sources. Such attacks occur when the information security policies and
procedures are inadequate.
Trojan horse attack: A computer Trojan is a program in which malicious or
harmful code is contained inside an apparently harmless program or data,
which can later gain control and cause damage, such as ruining the file
allocation table on your hard disk.
James, a newly recruited employee of an organization, received an email
containing a fake appointment letter. The letter claims to have been sent by the
real organization. James failed to identify the legitimacy of the letter and
,downloaded it. Consequently, malicious software was installed on his system,
and it provided remote access to the attacker.
Identity the type of cybercrime performed by James in the above scenario.
Answer - Phishing attack
Which of the following types of cybercrime involves taking advantage of
unsanitized input vulnerabilities to pass commands through a web application
and thereby retrieve information from the target database? Answer - SQL
injection attack
Benjamin, a professional hacker, joined as an intern in an organization and
obtained some permissions to access the resources related to his job. Soon
after gaining trust in the organization, he obtained elevated permissions to
access restricted parts of the network. Thus, he gained access to confidential
data of the organization.
Identify the type of attack performed by Benjamin in the above scenario.
Answer - Privilege escalation attack
Henry, a professional hacker, targeted an organization to gain illegitimate
access to its server. He launched an SQL injection attack from a remote location
on the target server to obtain users' credentials.
Which of the following types of attack has Henry performed in the above
scenario? Answer - External attack
Medicing Inc. targeted their competitor organization to steal information about
their product that gained immense popularity within a brief period. For this
purpose, Medicing Inc. employed Don, a professional hacker. Don performed
open-source intelligence gathering and analyzed the target product's details.
Using the obtained information, Medicing Inc. created a similar product and
launched it with a lower price.
Identify the cybercrime demonstrated in the above scenario. Answer -
Espionage
, Don, a professional hacker, targeted Johana's official email account to steal her
project-related files stored in it. In this process, Don tried all the possible
combinations of password characters through the trial-and-error method and
finally logged into her account.
Identify the type of cybercrime demonstrated in the above scenario Answer -
Brute-force attack
Which of the following types of attack is performed using a seemingly harmless
program containing malicious code that can later gain control and cause
damage, such as destruction of the file allocation table on a hard disk? Answer
- Trojan horse attack
Explanation:
Trojan horse attack: A computer Trojan is a program in which malicious or
harmful code is contained inside an apparently harmless program or data,
which can later gain control and cause damage, such as ruining the file
allocation table on your hard disk.
Denial of service attack: A DoS attack is an attack on a computer or network
that reduces, restricts, or prevents access to system resources for legitimate
users. In a DoS attack, attackers flood a victim's system with nonlegitimate
service requests or traffic to overload its resources and bring down the system,
leading to the unavailability of the victim's website or at least significantly
reducing the victim's system or network performance.
Structured query language attack: SQL injection/attack is a technique used to
take advantage of unsanitized input vulnerabilities to pass SQL commands
through a web application for execution by a backend database. In this
technique, the attacker injects malicious SQL queries into the user input form
either to gain unauthorized access to a database or to retrieve information
directly from the database.
Keylogger attack: Keylogger is a type of spyware used by attackers to record
keystrokes entered by the user.
The benefits of buying summaries with Stuvia:
Guaranteed quality through customer reviews
Stuvia customers have reviewed more than 700,000 summaries. This how you know that you are buying the best documents.
Quick and easy check-out
You can quickly pay through credit card or Stuvia-credit for the summaries. There is no membership needed.
Focus on what matters
Your fellow students write the study notes themselves, which is why the documents are always reliable and up-to-date. This ensures you quickly get to the core!
Frequently asked questions
What do I get when I buy this document?
You get a PDF, available immediately after your purchase. The purchased document is accessible anytime, anywhere and indefinitely through your profile.
Satisfaction guarantee: how does it work?
Our satisfaction guarantee ensures that you always find a study document that suits you well. You fill out a form, and our customer service team takes care of the rest.
Who am I buying these notes from?
Stuvia is a marketplace, so you are not buying this document from us, but from seller EvaTee. Stuvia facilitates payment to the seller.
Will I be stuck with a subscription?
No, you only buy these notes for $37.99. You're not tied to anything after your purchase.
Can Stuvia be trusted?
4.6 stars on Google & Trustpilot (+1000 reviews)
78075 documents were sold in the last 30 days
Founded in 2010, the go-to place to buy study notes for 14 years now